CVE-2020-2803

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

CVE-2020-2805

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

CVE-2020-2803

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

MGASA-2020-0173 Updated golang packages fix security vulnerability

Updated golang packages fix security vulnerability: An integer overflow vulnerability was found in the Go crypto/x509 and golang.org/x/crypto/cryptobyte libraries on 32-bit architectures. A remote attacker could exploit this by supplying a crafted x.509 certificate, or other ASN.1 structure, as...

DLL Hijacking Vulnerability in App Store

Application Treasure is a mobile application acquisition platform created by Tencent Application Center for smartphone users. Application Treasure suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to load untrusted dynamic link libraries for command execution...

DLL Hijacking Vulnerability in Driver Wizard

Driver Wizard is a set of driver management and hardware detection in one, professional-grade driver management and maintenance tools. Driver Wizard suffers from a DLL hijacking vulnerability, which can be exploited by attackers to load untrusted dynamic link libraries for command execution...

PT-2020-3628

Name of the Vulnerable Software and Affected Versions DAViCal Andrew's Web Libraries AWL versions through 0.60 Description The issue concerns a problem with session management in DAViCal Andrew's Web Libraries AWL, where the session key is not sufficiently hard to guess. This allows an attacker t...

PT-2020-3629

Name of the Vulnerable Software and Affected Versions DAViCal Andrew's Web Libraries AWL versions through 0.60 Description An issue in DAViCal Andrew's Web Libraries AWL allows for a brute-force attack due to insecure generation of long-term session cookies, which are used for long-term session...

CVE-2020-0760: Undefined Security Weakness

A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991...

CVE-2020-11729: Session Fixation

An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful...

CVE-2020-11728: Session Fixation

An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time and the incrementing sessionid can impersonate a session...

CVE-2020-6996: Stack-based Buffer Overflow

Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01. A specially crafted message may cause a stack-based buffer overflow. Authentication is not required to exploit this...

Microsoft Office 2010 Remote Code Execution Vulnerability (KB3203462)

This host is missing an important security update according to Microsoft KB3203462 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft PowerPoint 2010 RCE Vulnerability (KB4484235)

This host is missing an important security update according to Microsoft KB4484235 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft PowerPoint 2013 Service Pack 1 RCE Vulnerability (KB4484226)

This host is missing an important security update according to Microsoft KB4484226 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Publisher 2016 Remote Code Execution Vulnerability (KB4011097)

This host is missing an important security update according to Microsoft KB4011097 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2013 Remote Code Execution Vulnerability (KB4011104)

This host is missing an important security update according to Microsoft KB4011104 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Word 2016 Remote Code Execution Vulnerabilities (KB4484300)

This host is missing an important security update according to Microsoft KB4484300 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Word 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB4484295)

This host is missing an important security update according to Microsoft KB4484295 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2020-2805: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...